modoboa@2.1.0 vulnerabilities
Mail hosting made simple
-
latest version
2.2.4
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
4 months ago
-
licenses detected
- [0.7.0,1.2.0-rc2); [1.6.1,)
Direct Vulnerabilities
Known vulnerabilities in the modoboa package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when displaying the form error messages. How to fix Cross-site Scripting (XSS)? Upgrade |
[,2.2.2)
|
modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-Site Request Forgery (CSRF) due to the improper handling of user requests. An attacker can trick the victim into executing an unwanted logout by sending a malicious request. How to fix Cross-Site Request Forgery (CSRF)? Upgrade |
[,2.2.2)
|
modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the profile language field due to improper user input sanitization. How to fix Cross-site Scripting (XSS)? Upgrade |
[,2.2.2)
|
modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when displaying form error messages due to improper user input sanitization. How to fix Cross-site Scripting (XSS)? Upgrade |
[,2.2.2)
|